Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p1KIlYQEYH8xgsyezxBn51LetuA.roa
File: p1KIlYQEYH8xgsyezxBn51LetuA.roa (raw, json)
Hash identifier: a4MX3z1TynYfCTDyM41vRuLypu062rrMp33liI3TFSU=
Subject key identifier: A7:52:88:95:84:04:60:7F:31:82:CC:9E:CF:10:67:E7:52:DE:B6:E0
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A1416990C6703FF0EA2809DAB29A3CA63D
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p1KIlYQEYH8xgsyezxBn51LetuA.roa
Signing time: Thu 15 Oct 2026 21:13:19 +0000
ROA not before: Thu 15 Oct 2026 21:13:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205866
IP address blocks: 2a11:77c6::/32 maxlen: 32
2a11:b4c7::/32 maxlen: 32
2a11:bdc5::/32 maxlen: 32
2a11:bdc7::/32 maxlen: 32
2a11:eac2::/32 maxlen: 32
2a12:643::/32 maxlen: 32
2a12:e85::/32 maxlen: 32
2a12:d805::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:69:90:c6:70:3f:f0:ea:28:09:da:b2:9a:3c:a6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 15 21:13:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a75288958404607f3182cc9ecf1067e752deb6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:b4:ef:76:55:13:1c:0f:d6:44:10:b2:8f:
8a:61:d5:32:b6:22:40:26:fd:ca:5f:40:cf:c5:7e:
de:75:f6:c0:57:51:aa:13:22:d0:06:b1:97:ad:9e:
7d:c7:0b:e0:c4:dc:bb:cf:f4:65:ef:12:1e:9f:b9:
48:e1:e9:a6:f6:bc:c7:50:5c:a8:e9:d6:62:61:a6:
45:9b:a9:b5:ee:5e:d8:5b:e8:49:bd:ac:a9:a0:1c:
95:86:a7:75:bd:f0:02:fe:8c:09:e1:49:fb:3d:12:
b0:2a:ed:c3:bd:9b:36:ae:dd:cf:8a:8b:97:47:1f:
00:c4:43:7d:26:04:2e:10:af:8e:0c:78:d2:7d:30:
b9:c8:8b:e0:28:c8:23:14:67:d6:2a:bd:03:23:3e:
75:00:0a:11:92:f8:48:72:3f:0e:63:3e:d5:8c:a7:
76:f9:55:f2:e6:f5:42:65:31:3f:11:1a:25:a0:c3:
42:8c:c7:8a:53:65:83:21:ee:57:f6:10:4f:68:2c:
36:74:80:76:0b:5d:14:a3:bb:54:d2:d5:03:19:15:
7a:3d:61:0f:52:ac:8c:a5:0b:5f:7a:f3:f0:61:58:
2a:0b:d7:27:90:ec:50:db:45:2c:45:df:19:f3:5b:
56:27:77:f9:0c:f9:4a:5e:cf:8c:56:a1:b9:9d:78:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:52:88:95:84:04:60:7F:31:82:CC:9E:CF:10:67:E7:52:DE:B6:E0
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p1KIlYQEYH8xgsyezxBn51LetuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c6::/32
2a11:b4c7::/32
2a11:bdc5::/32
2a11:bdc7::/32
2a11:eac2::/32
2a12:643::/32
2a12:e85::/32
2a12:d805::/32
Signature Algorithm: sha256WithRSAEncryption
a1:b9:1d:e9:db:72:a2:fc:12:b6:85:2d:2f:a2:44:64:36:2d:
98:9e:ed:a9:d0:9c:3f:b7:53:ec:98:a3:5c:cc:0c:12:92:07:
bb:cf:c3:af:c9:eb:0d:de:8b:44:2f:6b:68:17:af:a9:52:97:
7b:03:1a:8e:16:7e:fa:99:3a:d8:33:1e:77:2f:2e:b9:76:4d:
3e:e3:85:dc:3e:83:36:84:14:a4:7b:d9:0a:f0:e2:6c:cb:12:
21:a5:63:50:61:bb:c6:6d:b9:a1:97:78:c0:5c:9a:f0:ce:b3:
3d:f5:9e:46:a7:ed:77:ee:97:42:11:33:fc:bd:6a:08:58:c1:
44:51:1c:ed:e0:b3:8b:15:56:79:fa:c9:0d:6d:d1:8f:77:61:
24:20:41:a0:76:42:a5:78:61:e3:2a:25:55:d9:88:67:21:fa:
c4:c3:55:3c:fe:1c:20:d2:c3:ea:8e:0e:30:25:a5:bb:96:03:
98:c9:c1:13:c1:dd:0b:f2:b9:d6:cb:96:68:86:fd:63:85:8a:
8c:cd:c9:7a:8f:63:47:c6:e4:1b:5a:b1:65:88:10:e7:57:a4:
16:9d:a2:ad:a2:23:36:df:c3:ff:b1:66:f0:2a:cd:8e:fc:98:
00:ab:79:6f:84:86:6c:78:ca:3a:cc:ac:de:74:86:91:92:79:
8b:ac:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:18 2026 by rpki-client